Carregando o concurso…
Leia o fragmento a seguir, extraído de um relatório técnico sobre a implantação de um sistema de detecção de intrusão (IDS) em uma rede corporativa:
"The IDS was configured in promiscuous mode on a mirrored port of the core switch. Although signature-based detection performed well against known exploits, the security team observed a high rate of false positives during peak hours. To mitigate this, they enabled anomaly-based detection with a baseline learned over two weeks. However, the baseline was contaminated by a periodic backup job that generated unusual traffic patterns, leading to missed alerts for a low-and-slow data exfiltration attempt. The team then decided to combine both approaches and tune thresholds, but the lack of encrypted traffic inspection limited visibility into TLS-encrypted command-and-control channels."
Com base no fragmento e nos fundamentos de segurança da informação, a alternativa que melhor explica a limitação central do IDS descrito e a medida técnica que a superaria é:
Selecione uma alternativa pra criar sua conta e salvar o progresso.